linux-kernel - Re: [BUG, Regression, bisected] USB mouse causes bug on 1st insert, ignored on 2nd insert, lsusb stuck at usbdev

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 20 Sep 2010 14:42:25 +0200 (CEST)
From:	Jiri Kosina <jkosina@...e.cz>
To:	Guillaume Chazarain <guichaz@...il.com>
Cc:	Phil Turmel <philip@...mel.org>, linux-kernel@...r.kernel.org,
	Greg Kroah-Hartman <gregkh@...e.de>,
	Alan Stern <stern@...land.harvard.edu>,
	Oliver Neukum <oliver@...kum.org>, Alan Ott <alan@...nal11.us>,
	linux-usb@...r.kernel.org, linux-input@...r.kernel.org,
	Mat <jackdachef@...il.com>, Andreas Bombe <aeb@...ian.org>,
	Alex Riesen <raa.lkml@...il.com>,
	Phil Turmel <philip@...mel.org>
Subject: Re: [BUG, Regression, bisected] USB mouse causes bug on 1st insert,
 ignored on 2nd insert, lsusb stuck at usbdev_open

On Mon, 20 Sep 2010, Guillaume Chazarain wrote:

> > The USB mouse I use with my laptop is causing a BUG when inserted.  It works at that
> > point, but if removed and re-inserted, it is ignored.  Also, after the 2nd insert,
> > other USB devices (like my thumb drive) are also ignored.
> >
> > [   37.450777] BUG: unable to handle kernel NULL pointer dereference at (null)
> > [   37.451148] IP: [<ffffffff817d0991>] hiddev_open+0xc1/0x220
> > [   37.452036] PGD 1131a0067 PUD 113036067 PMD 0
> > [   37.452924] Oops: 0000 [#1] PREEMPT SMP
> > [   37.453336] last sysfs file: /sys/devices/platform/toshiba_acpi/backlight/toshiba/max_brightness
> > [   37.453336] CPU 1
> > [   37.453336] Modules linked in: tpm_infineon iwlagn iwlcore tifm_7xx1 tpm_tis toshiba_bluetooth toshiba_acpi tifm_core pcmcia sdhci_pci yenta_socket sdhci [last unloaded: scsi_wait_scan]
> > [   37.453336]
> > [   37.453336] Pid: 3117, comm: hald-probe-hidd Not tainted 2.6.36-rc4-00166-g151b6a5 #28 Portable PC/TECRA A9
> > [   37.453336] RIP: 0010:[<ffffffff817d0991>]  [<ffffffff817d0991>] hiddev_open+0xc1/0x220

Could please those of you who are able to reproduce the problem (from a 
quick test seems that I am not) use 'addr2line' utility to convert the RIP 
value (ffffffff817d0991 in this case) to the line number inside of 
hiddev_open(), so that we can see whether it's something behind 
usbhid_find_interface() causing NULL pointer dereference, or whether it is 
intfdata being NULL and thus going to hid->hiddev faults?

(sticking two printk()s in there should do the same as well).

Thanks,

-- 
Jiri Kosina
SUSE Labs, Novell Inc.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/